CVE-2010-4693
Coppermine Photo Gallery <1.5.10 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.
Exploits (2)
References (7)
Scores
EPSS
0.0037
EPSS Percentile
58.7%
Classification
CWE
CWE-79
Status
published
Affected Products (50)
coppermine-gallery/coppermine_photo_gallery
< 1.5.10
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
coppermine-gallery/coppermine_photo_gallery
... and 35 more
Timeline
Published
Jan 11, 2011
Tracked Since
Feb 18, 2026